espe/infrastructure
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[mod] role:espe_backend-and-nginx

Browse source
This commit is contained in:
roydfalk 2024-06-09 11:15:53 +02:00
parent 9f624135c7
commit ee3d7d3a4e
2 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
roles/espe_backend-and-nginx/defaults/main.json
View file

@ -1,4 +1,5 @@
{ {
"var_espe_backend_and_nginx_domain": "espe.example.org", "var_espe_backend_and_nginx_domain": "espe.example.org",
"var_espe_backend_and_nginx_port": 4916 "var_espe_backend_and_nginx_port": 4916,
"var_espe_backend_and_nginx_tls": true
} }

2
roles/espe_backend-and-nginx/templates/conf.j2
View file

@ -8,12 +8,14 @@ server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;
{% if var_espe_backend_and_nginx_tls %}
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
listen 443 ssl http2; listen 443 ssl http2;
ssl_certificate /etc/ssl/certs/{{var_espe_backend_and_nginx_domain}}.pem; ssl_certificate /etc/ssl/certs/{{var_espe_backend_and_nginx_domain}}.pem;
ssl_certificate_key /etc/ssl/private/{{var_espe_backend_and_nginx_domain}}.pem; ssl_certificate_key /etc/ssl/private/{{var_espe_backend_and_nginx_domain}}.pem;
include /etc/nginx/ssl-hardening.conf; include /etc/nginx/ssl-hardening.conf;
{% endif %}
location / { location / {
proxy_pass http://localhost:{{var_espe_backend_and_nginx_port | string}}; proxy_pass http://localhost:{{var_espe_backend_and_nginx_port | string}};